WebAIM - Web Accessibility In Mind

E-mail List Archives

Re: reCAPTCHA replacement

for

From: Birkir R. Gunnarsson
Date: Dec 4, 2014 7:43AM

My first check was not as positive unfortunately (granted, this is
only a single check).
I used IE and immediately got redirected to an additional challenge
(it looks like the CAPTCHA equates using IE with being a robot, I am
sure one could have entertaining speculations on that(.
The problem is that I was completely unable to find an alternative
audio captcha when prompted for the traditional one.
I very much like the fact that user analysis is replacing guessing
games, but for the fallback, Google needs to make sure that users have
at least the same options as they had before (i.e. audio captcha).
For the image matching, I wonder if the audio alternative could be a
soundfile, such as an animal sound, that user can then match to images
with descriptive alt texts.
If you select "audio captcha" and hear a "meow", you probably go look
for an image of a cat.
Obviously the image that is displayed and the image you have to match
to it cannot have identical alt texts, it would make for an easy
crack.
Cheers
-Birkir


On 12/4/14, Léonie Watson < <EMAIL REMOVED> > wrote:
> Alastair Campbell wrote:
> "At first glance, it is keyboard accessible, has appropriate ARIA
> attributes
> (which are needed as they use a span for a checkbox), and it didn't fail
> when I only used the keyboard."
>
> Quick back/packet test with NVDA and Jaws in Firefox suggests it works
> well.
> They've used a tri-state checkbox, which shifts to partially checked whilst
> the verification is taking place, then completely checked when verified.
>
> Interestingly by the time I tried it in IE, I must have triggered one of
> the
> heuristics because it prompted me for the old-style CAPTCHA. Presumably the
> result of hitting it a few times in quick succession.
>
> Léonie.
>
>
> --
> @LeonieWatson Carpe diem
>
>
> -----Original Message-----
> From: <EMAIL REMOVED>
> [mailto: <EMAIL REMOVED> ] On Behalf Of Alastair
> Campbell
> Sent: 04 December 2014 14:11
> To: WebAIM Discussion List
> Subject: [WebAIM] reCAPTCHA replacement
>
> Interesting post from Google on their update/replacement for re-CAPTCHA:
> http://googlewebmastercentral.blogspot.co.uk/2014/12/are-you-robot-introduci
> ng-no-captcha.html
>
> The short story is that they are replacing the current CAPTCHA method
> (distorted image-text or distorted audio) with a simple tickbox for "I am
> not a robot". They then use some heuristics based on IP address, browser
> config, mouse pointer behaviour etc. to guess if you are a robot.
>
> That bit about using mouse movements to analyse your human-ness obviously
> rang alarm bells, and I couldn't find an example easily, so I created one
> here:
> https://alastairc.ac/testing/recaptcha-test.html
>
> At first glance, it is keyboard accessible, has appropriate ARIA attributes
> (which are needed as they use a span for a checkbox), and it didn't fail
> when I only used the keyboard.
>
> Overall, it looks like an important improvement from an accessibility point
> of view. If the heuristics fail you then you get the traditional CAPTCHA
> approach, however, that should be a lot less frequent.
>
> It would be interesting to see how the image-matching version works from an
> accessibility point of view, I didn't find a way to trigger that within my
> lunch break.
>
> -Alastair
>
> PS. Alt text for the images in the blog post:
> 1. A traditional CAPTCHA where you have to type in the distorted words
> shown, or choose the audio option.
> 2. An animated image showing a checkbox with label "I'm not a robot", and
> the reCAPTCHA logo.
> 3. The checkbox shows the traditional method underneath.
> 4 & 5. Two examples of the checkbox showing an image of a cat, and then
> nine
> images underneath that to match against.
> > > messages to <EMAIL REMOVED>
>
>
> > > >


--
Work hard. Have fun. Make history.